From f41b014ebbc2e0fc22b0bd7400f59645d2781731 Mon Sep 17 00:00:00 2001 From: Joshua Date: Wed, 18 Feb 2026 14:20:06 -0800 Subject: [PATCH] Add assurance requirement to launcher release gate --- docs/release-gate.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/release-gate.md b/docs/release-gate.md index cb83b74..d93376e 100644 --- a/docs/release-gate.md +++ b/docs/release-gate.md @@ -7,6 +7,7 @@ 3. Governance install path fails closed on invalid evidence. 4. Marketplace and status APIs are called with app-session auth. 5. Wallet v1 acceptance criteria pass (`docs/wallet-v1-product-spec.md`). +6. Owner/admin actions block unless `identity_assurance_level=onramp_attested`. ## Blockers @@ -14,3 +15,4 @@ 2. Any path that leaks private key material. 3. Any path that bypasses entitlement checks for governance activation. 4. Any launch flow that exposes seed phrase by default. +5. Any owner support/install action that proceeds without required identity assurance.